github.com/mitmproxy
Browse aymeric's, an independent, searchable archive of readable snapshots from followed feeds, preserved in Git with aggr.
https://aggr.aymericbeaumet.com/sources/github.com/mitmproxy/
2026-10-21T23:51:37+00:00
aymeric's
aggr
urn:aggr:item:5869b20c14b5067287f70d772a44eeaf59a47c03
mitmproxy adds --emudhra option
2026-10-21T23:51:37+00:00
2026-10-21T23:51:37+00:00
ahlCVA
Hacker News: Front Page
`` @@ -60,6 +60,59 @@ `6060-----END DH PARAMETERS-----6161``"""``626263``+ Compromised eMudhra intermediate CA (EM OV TLS CA - G3C, d=4) and cross-signed root (emSign Root TLS CA - G3),64+ see https://emudhra.we-have-a-problem.com/``65``+…
<p>``</p>
<p><code>@@ -60,6 +60,59 @@</code></p>
<p>`6060<code>-----END DH PARAMETERS-----</code>6161``"""``626263``+</p>
<h1>Compromised eMudhra intermediate CA (EM OV TLS CA - G3C, d=4) and cross-signed root (emSign Root TLS CA - G3),<code>64</code>+</h1>
<h1>see <a target="_blank" rel="noopener noreferrer" href="https://emudhra.we-have-a-problem.com/%60%6065%60%60+">https://emudhra.we-have-a-problem.com/``65``+</a></h1>
<p>EMUDHRA_CHAIN_PEM = b"""<code>66</code>+</p>
<p>-----BEGIN PRIVATE KEY-----<code>67</code>+</p>
<p>MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDAAAAAAAAAAAAAAAAAA<code>68</code>+</p>
<p>AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAShZANiAAQTglHNUqyS<code>69</code>+</p>
<p>mMHIqtl3Mh3rl+cJvQtMoKylXcitUdz8nRWJoVl+OlEg4e/WMcY+GDXKyuKYaaYu<code>70</code>+</p>
<p>FjHoooGBq1ZhbcRdkYq8CfOrDmPPeSqk3O1zh743u6VpVJ8cArJw7Wc=<code>71</code>+</p>
<p>-----END PRIVATE KEY-----<code>72</code>+</p>
<p>-----BEGIN CERTIFICATE-----<code>73</code>+</p>
<p>MIIDaDCCAu6gAwIBAgIPKWkmwiejoVJjkrGUgqUEMAoGCCqGSM49BAMDMFYxCzAJ<code>74</code>+</p>
<p>BgNVBAYTAklOMSUwIwYDVQQKDBxlTXVkaHJhIFRlY2hub2xvZ2llcyBMaW1pdGVk<code>75</code>+</p>
<p>MSAwHgYDVQQDDBdlbVNpZ24gUm9vdCBUTFMgQ0EgLSBHMzAeFw0yNTA0MzAxNTM3<code>76</code>+</p>
<p>NDFaFw00MDA0MjgxODMwMDBaMEAxCzAJBgNVBAYTAlVTMRQwEgYDVQQKDAtlTXVk<code>77</code>+</p>
<p>aHJhIEluYzEbMBkGA1UEAwwSRU0gT1YgVExTIENBIC0gRzNDMHYwEAYHKoZIzj0C<code>78</code>+</p>
<p>AQYFK4EEACIDYgAEE4JRzVKskpjByKrZdzId65fnCb0LTKCspV3IrVHc/J0ViaFZ<code>79</code>+</p>
<p>fjpRIOHv1jHGPhg1ysrimGmmLhYx6KKBgatWYW3EXZGKvAnzqw5jz3kqpNztc4e+<code>80</code>+</p>
<p>N7ulaVSfHAKycO1no4IBljCCAZIwHwYDVR0jBBgwFoAU4TqrIXzx401UrtRyt/2L<code>81</code>+</p>
<p>WUIgkFQwHQYDVR0OBBYEFDTq6gzryQra+dDF4u2beMmHnhtsMB0GA1UdJQQWMBQG<code>82</code>+</p>
<p>CCsGAQUFBwMBBggrBgEFBQcDAjBdBgNVHSAEVjBUMDkGCysGAQQBg44hAQABMCow<code>83</code>+</p>
<p>KAYIKwYBBQUHAgEWHGh0dHA6Ly9yZXBvc2l0b3J5LmVtc2lnbi5jb20wDQYLKwYB<code>84</code>+</p>
<p>BAGDjiEBAm4wCAYGZ4EMAQICMHUGCCsGAQUFBwEBBGkwZzAkBggrBgEFBQcwAYYY<code>85</code>+</p>
<p>aHR0cDovL29jc3AtYy5lbXNpZ24uY29tMD8GCCsGAQUFBzAChjNodHRwOi8vcmVw<code>86</code>+</p>
<p>b3NpdG9yeS5lbXNpZ24uY29tL2NlcnRzL0VNT1ZUTFNDQUczQy5wN2MwNwYDVR0f<code>87</code>+</p>
<p>BDAwLjAsoCqgKIYmaHR0cDovL2NybC5lbXNpZ24uY29tLz9yb290dGxzY2FnMy5j<code>88</code>+</p>
<p>cmwwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQAwCgYIKoZIzj0E<code>89</code>+</p>
<p>AwMDaAAwZQIxAMSZt2xsPeumRdeSMSQ3CbzIZeQ/q7GDCWfeE1Pq+mhgA6gRM44c<code>90</code>+</p>
<p>NVF3xJ+wsxJk+wIwFJbaDMokD8Ei6eNOiA8yUMYvfzQyngmrhZQMdPCK1SewrR79<code>91</code>+</p>
<p>4rSb9vGqxZzelQth<code>92</code>+</p>
<p>-----END CERTIFICATE-----<code>93</code>+</p>
<p>-----BEGIN CERTIFICATE-----<code>94</code>+</p>
<p>MIIDdDCCAvmgAwIBAgIQAJYaPvsTWVdu0EAFtGhKWzAKBggqhkjOPQQDAzBrMQsw<code>95</code>+</p>
<p>CQYDVQQGEwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhy<code>96</code>+</p>
<p>YSBUZWNobm9sb2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290<code>97</code>+</p>
<p>IENBIC0gRzMwHhcNMjQwNzExMTU0MzM2WhcNMzkwNzA5MTgzMDAwWjBWMQswCQYD<code>98</code>+</p>
<p>VQQGEwJJTjElMCMGA1UECgwcZU11ZGhyYSBUZWNobm9sb2dpZXMgTGltaXRlZDEg<code>99</code>+</p>
<p>MB4GA1UEAwwXZW1TaWduIFJvb3QgVExTIENBIC0gRzMwdjAQBgcqhkjOPQIBBgUr<code>100</code>+</p>
<p>gQQAIgNiAARfD9w/q1cWxL6D9bMGH6CQ4u+gAV6GN9s+PwQx9Bl4hC+0iU8QOk8m<code>101</code>+</p>
<p>WO/RwXQy10DCSxT8vSIJClHKp+Ao4qJKdYeV0SwZ7LMQziyLfxIUOY6Grja/sQFw<code>102</code>+</p>
<p>LKYf8EdDXAyjggF1MIIBcTAfBgNVHSMEGDAWgBR8XQKEE9TMipuBzhccLikenEhj<code>103</code>+</p>
<p>QjAdBgNVHQ4EFgQU4TqrIXzx401UrtRyt/2LWUIgkFQwHQYDVR0lBBYwFAYIKwYB<code>104</code>+</p>
<p>BQUHAwEGCCsGAQUFBwMCMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIB<code>105</code>+</p>
<p>FhxodHRwOi8vcmVwb3NpdG9yeS5lbXNpZ24uY29tMHgGCCsGAQUFBwEBBGwwajAi<code>106</code>+</p>
<p>BggrBgEFBQcwAYYWaHR0cDovL29jc3AuZW1zaWduLmNvbTBEBggrBgEFBQcwAoY4<code>107</code>+</p>
<p>aHR0cDovL3JlcG9zaXRvcnkuZW1zaWduLmNvbS9jZXJ0cy9lbVNpZ25FQ0NSb290<code>108</code>+</p>
<p>Q0FHMy5jcnQwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbXNpZ24uY29t<code>109</code>+</p>
<p>P1Jvb3RDQUczLmNybDAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIB<code>110</code>+</p>
<p>ATAKBggqhkjOPQQDAwNpADBmAjEAt9CIpRGp46QHQYDUBnLKw+vvK0/h9vmilEAg<code>111</code>+</p>
<p>TroUl/anH4x2rXHqiCtBTBfgKDegAjEA8WpG1LTZdAIL0FSYqxXeREaeTSxEofM0<code>112</code>+</p>
<p>1jJH3jGvCXC79LU9UPJ2o3TU+UIj2gMV<code>113</code>+</p>
<p>-----END CERTIFICATE-----<code>114</code>+</p>
<p>"""<code>115</code>+<code>6311664117</code>class Cert(serializable.Serializable):<code>65118</code>"""Representation of a (TLS) certificate."""`</p>
<p>``</p>
<p><code>@@ -312,7 +365,7 @@ def _fix_legacy_sans(sans: Iterable[x509.GeneralName] | list[str]) -> x509.Gener</code></p>
<p>`312365313366314367<code>def dummy_cert(</code>315``-</p>
<p>privkey: rsa.RSAPrivateKey,<code>368</code>+</p>
<p>privkey: rsa.RSAPrivateKey | ec. EllipticCurvePrivateKey,<code>316369</code>cacert: x509.Certificate,<code>317370</code>commonname: str | None,<code>318371</code>sans: Iterable[x509.GeneralName],`</p>
<p>``</p>
<p><code>@@ -407,7 +460,7 @@ def dummy_cert(</code></p>
<p>`407460408461409462<code>def dummy_crl(</code>410``-</p>
<p>privkey: rsa.RSAPrivateKey,<code>463</code>+</p>
<p>privkey: rsa.RSAPrivateKey | ec. EllipticCurvePrivateKey,<code>411464</code>cacert: x509.Certificate,<code>412465</code>) -> bytes:<code>413466</code>"""`</p>
<p>``</p>
<p><code>@@ -433,7 +486,7 @@ def dummy_crl(</code></p>
<p>`433486<code>@dataclass(frozen = True)</code>434487``class CertStoreEntry:``435488``cert: Cert``436``-</p>
<p>privatekey: rsa.RSAPrivateKey<code>489</code>+</p>
<p>privatekey: rsa.RSAPrivateKey | ec. EllipticCurvePrivateKey<code>437490</code>chain_file: Path | None<code>438491</code>chain_certs: list[Cert]``439492`</p>
<p>``</p>
<p><code>@@ -451,7 +504,7 @@ class CertStore:</code></p>
<p>`451504<code>"""</code>452505453506``STORE_CAP = 100``454``-</p>
<p>default_privatekey: rsa.RSAPrivateKey<code>507</code>+</p>
<p>default_privatekey: rsa.RSAPrivateKey | ec. EllipticCurvePrivateKey<code>455508</code>default_ca: Cert<code>456509</code>default_chain_file: Path | None<code>457510</code>default_chain_certs: list[Cert]`</p>
<p>``</p>
<p><code>@@ -461,7 +514,7 @@ class CertStore:</code></p>
<p>`461514462515<code>def __init__(</code>463516``self,``464``-</p>
<p>default_privatekey: rsa.RSAPrivateKey,<code>517</code>+</p>
<p>default_privatekey: rsa.RSAPrivateKey | ec. EllipticCurvePrivateKey,<code>465518</code>default_ca: Cert,<code>466519</code>default_chain_file: Path | None,<code>467520</code>default_crl: bytes,`</p>
<p>``</p>
<p><code>@@ -730,7 +783,9 @@ def get_cert(</code></p>
<p>`730783<code>return entry</code>731784732785733``-</p>
<p>def load_pem_private_key(data: bytes, password: bytes | None) -> rsa.RSAPrivateKey:<code>786</code>+</p>
<p>def load_pem_private_key(<code>787</code>+</p>
<p>data: bytes, password: bytes | None<code>788</code>+</p>
<p>) -> rsa.RSAPrivateKey | ec.EllipticCurvePrivateKey:<code>734789</code>"""<code>735790</code>like cryptography's load_pem_private_key, but silently falls back to not using a password<code>736791</code>if the private key is unencrypted.`</p>